Your Responsibilities

• Security Architecture & Cloud Guardrails: You will take technical ownership of the security architecture and controls across our Azure environment - from Defender for Cloud and Microsoft Sentinel to Log Analytics. You will build and maintain the corresponding guardrails directly in Terraform.
• Detection Engineering: You will develop and continuously improve our detections in close collaboration with our Security Analyst, who is responsible for day-to-day SIEM monitoring and triage. You will work as a well-coordinated team rather than in separate silos.
• Vulnerability Management: You will further develop our vulnerability management and monitoring across a hybrid environment. This includes our growing cloud landscape as well as the existing on-premises stack for as long as the migration is ongoing.
• Security Beyond the Cloud: You will contribute your expertise beyond cloud security, including identity, endpoint security, application security, incident response, and AI. Using your security engineering skills, you will, for example, develop tooling for AI-assisted penetration testing within our team and translate it into practical, scalable processes.
• AI-Assisted Engineering: You will use tools such as Claude Code to build and maintain internal security tools and automations. At the same time, you will help us identify AI-specific risks early—from the secure use of AI coding assistants to prompt injection.

Your Skillset

• Azure Security & Certifications: You have at least five years of experience in security engineering and several years of hands-on experience implementing Azure security. You hold an AZ-500 certification or have equivalent practical expertise. SC-100, CISSP, CCSP, or Security+ certifications are a plus.
• Infrastructure & Automation: You can confidently read, write, and further develop security-related Terraform code. Experience with Python, Django, PowerShell, or AI-assisted development is a plus.
• Identity & Detection: You have practical experience with Entra ID, RBAC, and PIM, as well as solid knowledge of network security, SIEM, and detection engineering.
• Offensive Security & Vulnerability Management: Ideally, you have experience with traditional or AI-assisted penetration testing and with tools such as Tenable or Microsoft Defender Vulnerability Management.
• Hands-On Mindset: You do not just design security controls -you implement and operate them in practice. When you identify a problem, you do not wait for a ticket; you take ownership and develop a solution.
• Collaboration & Communication: You share knowledge and responsibility and work closely with the team on areas of joint ownership. You communicate confidently and professionally in English. German is a plus, but not a requirement.

Experience with an ongoing cloud migration and AI/LLM security is welcome, but not essential. What matters to us is what you can genuinely do - substance beats buzzword bingo.